CVE-2009-2949

CVE-2009-2949 describes an integer overflow vulnerability in OpenOffice.org versions prior to 3.2, specifically within the XPMReader::ReadXPM function. This flaw allows remote attackers to execute arbitrary code by crafting a malicious XPM file, which triggers a heap-based buffer overflow. With a CVSS score of 9.3, this vulnerability is critical, requiring no authentication and moderate attack complexity, but potentially leading to complete compromise of confidentiality, integrity, and availability. Despite its high severity and EPSS score, there is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.